Security News

With ID theft, fraud fears growing, credit cards ranked on security 02 Aug 2007 13:00 GMT
A study by Javelin Research of credit cards from 25 of the largest issuers found that many still fall short of protecting users from fraud.

Source: Computerworld

Black Hat: Web browser attack skirts corporate firewall 02 Aug 2007 10:53 GMT
Not so much an 0day as a 3,650day: Security researcher Dan Kaminsky on Wednesday demonstrated a browser-based attack that takes advantage of a ten-year-old security issue.

Source: Computerworld

Vendors say patent system needs work 02 Aug 2007 10:53 GMT
The U.S. patent system is "tilting out of bounds," said the chief patent counsel for Apple at the AlwaysOn Stanford Summit on Wednesday -- mixing his sports metaphors but drawing assent from various tech-industry representatives in attendance. And it's not only the USPTO that's in the weeds.

Source: Computerworld

Black Hat: NSA guru lauds security intelligence sharing 02 Aug 2007 10:53 GMT
Data-sharing efforts led by the NSA and other federal agencies are maturing rapidly, said NSA official Tony Stager at Black Hat on Wednesday. His keynote speech discussed changes in atmosphere, best practices, and changes in priorities for the federal government during recent years.

Source: Computerworld

D'oh! Homer 'photo' exposes Chinese media piracy 02 Aug 2007 09:51 GMT
It only sounds like a Simpsons plot: China's official Xinhua News Agency inadvertently demonstrated the problem of copyright violation by state-run media agencies... by using a picture of Homer's tiny brain to illustrate a news story concerning multiple sclerosis.

Source: Computerworld

Mozilla to give away own security testing tools 02 Aug 2007 08:50 GMT
A JavaScript fuzzer that's found a number of vulnerabilities in the Firefox browser will be the first of a series of homegrown security tools Mozilla will release to the open-source community, the company's head of security said Wednesday.

Source: Computerworld

Researchers: Premature rush to Ajax a security threat 02 Aug 2007 08:50 GMT
The rush to add AJAX functionality leaves a great many Web sites vulnerable to a variety of security threats, according to two researchers who demonstrated a few of them at this week's Black Hat USA gathering.

Source: Computerworld

Apple updates iPhone, beats researchers' deadline 01 Aug 2007 09:11 GMT
With a comfortable two days to spare before the deadline set by security researchers holding details of a major vulnerability, Apple has issued its first patch for the iPhone.